CyberSecBulletin

Husainali52 vulnerabilities

We track 2 vulnerabilities in Husainali52 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 19, 2026.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest Husainali52 vulnerabilities

  • 8.8 High severity

    WP AUDIO GALLERY: Missing Authorization

    CVE-2025-13603Husainali52

    The WP AUDIO GALLERY plugin for WordPress is vulnerable to Unauthorized Arbitrary File Read in all versions up to, and including, 2.0. This is due to insufficient capability checks and lack of nonce verification on the "wpag_htaccess_callback" function This ma

  • 8.1 High severity

    WP AUDIO GALLERY: External Control of File Name or Path

    CVE-2025-13322Husainali52

    The WP AUDIO GALLERY plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and including, 2.0. This is due to the `wpag_uploadaudio_callback()` AJAX handler not properly validating user-su